diff --git a/docs/deployment-nixos.md b/docs/deployment-nixos.md
index 108815a..291cd27 100644
--- a/docs/deployment-nixos.md
+++ b/docs/deployment-nixos.md
@@ -17,7 +17,7 @@ Every release attaches the following artifacts to the GitHub release:
 | `helpwave-privacy-<VER>.jar`               | `privacy/`                             | `FormAction` SPI: privacy checkbox + acceptance attrs.    |
 | `helpwave-picture-<VER>.jar`               | `picture/`                             | `RealmResourceProvider` SPI: avatar upload to S3 / R2.    |
 
-`<VER>` is the SPI Maven version (`keycloak-extensions/pom.xml`, currently `0.1.0`),
+`<VER>` is the SPI Maven version (`keycloak-extensions/pom.xml`, currently `0.2.0`),
 which is independent from the theme/npm version in `package.json`. All four jars go into
 Keycloak's `providers/` directory — `services.keycloak.plugins` does that for you.
 
@@ -28,8 +28,8 @@ Keycloak's `providers/` directory — `services.keycloak.plugins` does that for
 let
   domain = "id.helpwave.de";
 
-  themeVersion = "0.4.0";   # ⇄ package.json version → release tag v0.4.0
-  spiVersion   = "0.1.0";   # ⇄ keycloak-extensions/pom.xml
+  themeVersion = "0.5.0";   # ⇄ package.json version → release tag v0.5.0
+  spiVersion   = "0.2.0";   # ⇄ keycloak-extensions/pom.xml
 
   release = file: sha:
     pkgs.fetchurl {
@@ -119,7 +119,7 @@ in
 >
 > ```sh
 > nix-prefetch-url --type sha256 \
->   "https://github.com/helpwave/id.helpwave.de/releases/download/v0.4.0/helpwave-picture-0.1.0.jar"
+>   "https://github.com/helpwave/id.helpwave.de/releases/download/v0.5.0/helpwave-picture-0.2.0.jar"
 > ```
 >
 > Or just run `nixos-rebuild switch` once with all four `sha256-AAA…` placeholders, copy
diff --git a/keycloak-extensions/captcha/pom.xml b/keycloak-extensions/captcha/pom.xml
index 6453722..4cc9558 100644
--- a/keycloak-extensions/captcha/pom.xml
+++ b/keycloak-extensions/captcha/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>de.helpwave.keycloak</groupId>
         <artifactId>helpwave-keycloak-extensions</artifactId>
-        <version>0.1.0</version>
+        <version>0.2.0</version>
     </parent>
 
     <artifactId>helpwave-captcha</artifactId>
diff --git a/keycloak-extensions/picture/pom.xml b/keycloak-extensions/picture/pom.xml
index e684d38..0652259 100644
--- a/keycloak-extensions/picture/pom.xml
+++ b/keycloak-extensions/picture/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>de.helpwave.keycloak</groupId>
         <artifactId>helpwave-keycloak-extensions</artifactId>
-        <version>0.1.0</version>
+        <version>0.2.0</version>
     </parent>
 
     <artifactId>helpwave-picture</artifactId>
diff --git a/keycloak-extensions/pom.xml b/keycloak-extensions/pom.xml
index e689662..de88e97 100644
--- a/keycloak-extensions/pom.xml
+++ b/keycloak-extensions/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>de.helpwave.keycloak</groupId>
     <artifactId>helpwave-keycloak-extensions</artifactId>
-    <version>0.1.0</version>
+    <version>0.2.0</version>
     <packaging>pom</packaging>
     <name>helpwave Keycloak Extensions</name>
     <description>Keycloak SPI extensions used by id.helpwave.de</description>
diff --git a/keycloak-extensions/privacy/pom.xml b/keycloak-extensions/privacy/pom.xml
index ce0360e..2beb3e9 100644
--- a/keycloak-extensions/privacy/pom.xml
+++ b/keycloak-extensions/privacy/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>de.helpwave.keycloak</groupId>
         <artifactId>helpwave-keycloak-extensions</artifactId>
-        <version>0.1.0</version>
+        <version>0.2.0</version>
     </parent>
 
     <artifactId>helpwave-privacy</artifactId>
diff --git a/package.json b/package.json
index a2fcac8..c7f38e2 100755
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "id.helpwave.de",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "repository": {
     "type": "git",
     "url": "git://github.com/helpwave/id.helpwave.de.git"